diff --git a/machines/gw-cnx-1/configuration.nix b/machines/gw-cnx-1/configuration.nix
index 4320c31..24c7be2 100644
--- a/machines/gw-cnx-1/configuration.nix
+++ b/machines/gw-cnx-1/configuration.nix
@@ -26,6 +26,7 @@
     siteId = 1;
     wan.interface = "enp1s0";
     wan.vlanId = null; # this ISP runs PPPoE untagged on the port
+    wan.macAddress = "a8:b8:e0:01:06:87";
     trunkPorts = [
       "enp2s0"
       # "enp3s0" # STAGING: serves as the uplink below until cutover